Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: cXg4U0A5bX8tKySB1trByVcWVzH7OFrp2k/rX3tGM9o=
Subject key identifier: ED:63:98:5A:5D:44:B6:05:6D:C4:20:75:89:34:EF:61:DA:41:D1:A2
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 0199FA6ABB3F18C604B883426AFAF03E67E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 0C
Signing time: Sun 19 Oct 2025 03:02:02 +0000
Manifest this update: Sun 19 Oct 2025 03:02:02 +0000
Manifest next update: Mon 20 Oct 2025 03:02:02 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: dl70sbRefxtT8kspzeygKnTw0swpwLpAPHM+aoAJxco=)
2: b771fZdz_MNhiObaQsIwRdjf7Gs.roa (hash: o+D5q+mMR9tPd7YAvMxT+oCI4+Bj3WK3M/NrPMAIyl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:bb:3f:18:c6:04:b8:83:42:6a:fa:f0:3e:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Oct 19 03:02:02 2025 GMT
Not After : Oct 20 03:02:02 2025 GMT
Subject: CN=ed63985a5d44b6056dc420758934ef61da41d1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:24:fe:0e:aa:66:7b:09:f8:2f:ea:1b:f5:
f3:0f:d7:4f:92:a7:d4:1c:69:89:c5:63:9f:56:8d:
c6:b3:a7:a8:e9:04:bd:c7:e4:fd:aa:12:2b:d5:73:
e9:39:db:10:ec:14:72:00:71:93:a2:73:a5:7c:58:
8c:ac:29:83:c7:47:e0:5f:18:f0:85:67:27:4e:9c:
ad:af:91:50:63:65:94:e2:2e:85:85:43:3d:b2:6e:
39:80:94:cb:56:66:6d:0f:f4:29:34:a4:58:f4:1e:
ac:63:45:dc:de:c1:94:10:1e:6b:be:64:95:b3:71:
10:cd:87:70:63:6f:23:2f:6e:bf:ae:95:81:4a:f4:
60:c6:50:69:1c:f5:24:0c:48:1c:84:2e:42:4a:3d:
7d:ef:60:14:f6:4b:ac:53:ef:2f:24:33:ee:b5:4b:
2f:ef:cd:1e:b1:18:45:a4:6e:74:89:bb:b4:c6:59:
6e:b8:11:67:ac:0c:11:51:70:a8:88:b7:fa:c6:e8:
45:e2:ca:ca:ae:50:c9:d1:5e:f3:9d:e5:9b:42:99:
59:df:36:76:27:4c:2f:9e:25:70:bc:3a:bf:b0:ae:
d8:89:76:4a:98:5b:78:42:93:4b:5a:fe:a0:4f:d7:
b2:5a:03:58:f4:57:1a:1b:00:70:e1:2f:f7:4b:e4:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:63:98:5A:5D:44:B6:05:6D:C4:20:75:89:34:EF:61:DA:41:D1:A2
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e7:f4:23:66:ad:66:e4:dd:a5:a1:b2:89:f2:db:87:72:37:
ac:d8:2c:3c:e3:25:da:99:83:39:92:16:5e:c9:5b:0d:05:0c:
69:e6:60:e3:49:72:22:be:2b:e2:4d:b8:72:c6:0d:74:15:73:
f6:c2:6e:f7:d8:d0:95:ec:7f:09:d2:92:e3:0c:d0:29:29:71:
60:9d:21:9c:e5:49:73:55:2a:bc:a1:da:93:b8:22:45:60:9c:
f3:22:db:43:c0:6e:6a:6c:87:d3:30:a3:5c:25:65:e5:95:02:
da:1b:95:90:b7:bd:aa:12:e5:3c:52:74:d6:df:44:ff:46:32:
32:fe:55:28:93:c3:42:48:37:e2:8f:0f:23:32:49:b5:64:41:
2f:4f:56:69:d9:43:c0:da:70:1a:28:35:a8:af:50:e7:5c:a8:
c9:83:50:eb:b7:be:55:53:80:85:1e:7b:3c:b4:7b:64:dd:97:
16:20:bd:90:f0:14:4b:8a:2f:d0:2d:af:22:7f:7b:b0:65:ea:
14:3d:49:6f:62:1e:c5:92:8e:b0:89:56:0e:e8:03:7c:07:91:
e2:14:85:ca:ce:7e:c6:f4:66:a2:4a:1b:13:02:03:00:09:bb:
31:b3:a3:71:e9:67:64:44:3d:d8:2d:7c:1a:5d:70:04:37:25:
26:35:a1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:10 2025 by rpki-client